MozDef: The Mozilla Defense Platform
Clone or download
Phrozyn Merge pull request #1004 from mozilla/key_update_for_pulseguardian
updating key fields for pulseguardian events to move source_ip to sou…
Latest commit 9abad28 Dec 18, 2018
Permalink
Type Name Latest commit message Commit time
Failed to load latest commit information.
alerts Merge pull request #964 from mozilla/lower_keys Dec 18, 2018
benchmarking Fixup block comments not having a space after hash Dec 14, 2018
bot Fixup unused variables check Dec 14, 2018
cloudy_mozdef Merge branch 'master' into remove-cloudy-mozdef-defaults Nov 26, 2018
config Merge remote-tracking branch 'origin/infosec_workweek' into virtualen… Oct 24, 2018
cron Merge pull request #964 from mozilla/lower_keys Dec 18, 2018
docker Remove unused import statements Dec 14, 2018
docs tabs/spaces fix Dec 12, 2018
examples Fixup unused variables check Dec 14, 2018
loginput Fixup unused variables check Dec 14, 2018
meteor reset the cursor on error Nov 12, 2018
mozdef_util Merge pull request #1000 from mozilla/remove_unused_mozdef_util_files Dec 14, 2018
mq Merge pull request #1004 from mozilla/key_update_for_pulseguardian Dec 18, 2018
rest Merge pull request #1003 from mozilla/generic_logincounts Dec 17, 2018
static Remove heatmap html page Jun 15, 2017
systemdfiles Update python virtualenv path for service files Apr 20, 2018
tests Merge pull request #964 from mozilla/lower_keys Dec 18, 2018
.flake8 Fixup unused variables check Dec 14, 2018
.gitignore add feature removal docs, update gitignore Nov 6, 2018
.travis.yml upgrade travis docker-compose as per https://docs.travis-ci.com/user/… Oct 30, 2018
CONTRIBUTING.md Modifying urls to point to mozilla from jeffbryner, slight readabilit… Jun 15, 2017
LICENSE Updated license file to conform with MPL Feb 25, 2014
Makefile Merge pull request #987 from mozilla/enable_test_resources_external Nov 29, 2018
README.md MVP on doc changes to support reinvent Nov 24, 2018
requirements.txt Merge pull request #1002 from mozilla/update_request_version_dependen… Dec 14, 2018

README.md

Build Status Documentation Status

MozDef: The Mozilla Defense Platform

Why?

The inspiration for MozDef comes from the large arsenal of tools available to attackers. Suites like metasploit, armitage, lair, dradis and others are readily available to help attackers coordinate, share intelligence and finely tune their attacks in real time. Defenders are usually limited to wikis, ticketing systems and manual tracking databases attached to the end of a Security Information Event Management (SIEM) system.

The Mozilla Defense Platform (MozDef) seeks to automate the security incident handling process and facilitate the real-time activities of incident handlers.

Goals:

  • Provide a platform for use by defenders to rapidly discover and respond to security incidents.
  • Automate interfaces to other systems like bunker, cymon, mig
  • Provide metrics for security events and incidents
  • Facilitate real-time collaboration amongst incident handlers
  • Facilitate repeatable, predictable processes for incident handling
  • Go beyond traditional SIEM systems in automating incident handling, information sharing, workflow, metrics and response automation

Status:

MozDef is in production at Mozilla where we are using it to process over 300 million events per day.

Give MozDef a Try in AWS:

Launch MozDef

Documentation:

http://mozdef.readthedocs.org/en/latest/